Overview

overview

7

Static

static

1

VIRUS USE ...!!.exe

windows10-1703-x64

3

VIRUS USE ...!!.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    VIRUS USE ON VIRTUAL MACHINE ONLY!!.exe

  • Size

    10KB

  • Sample

    230331-ygh3rsec41

  • MD5

    52adb8644330dcae514aefd34c017f32

  • SHA1

    9583bd3b7577258189b966871a08a6a36d4a00eb

  • SHA256

    d1e2dbb528852b1ba8b60ee65e0b8e68f6d586a25d097a9a18441e7113ea14be

  • SHA512

    30be31902975b53cbafe8dd669bae89097a513a9be2dead31b9320d26556cefc9da6a034660cb8d0281e6a167c90b76c1c37d9a1f859252eb60123f464a34b89

  • SSDEEP

    192:TL0AUNdaLixyaupSiP/VunlYJLLLTuCadvLvLvLvLvLvLvLvLvLvgQfP5cq7av:TL0AmdaLikV3hPLTuCadvLvLvLvLvLvy

Score
7/10

Malware Config

Targets

    • Target

      VIRUS USE ON VIRTUAL MACHINE ONLY!!.exe

    • Size

      10KB

    • MD5

      52adb8644330dcae514aefd34c017f32

    • SHA1

      9583bd3b7577258189b966871a08a6a36d4a00eb

    • SHA256

      d1e2dbb528852b1ba8b60ee65e0b8e68f6d586a25d097a9a18441e7113ea14be

    • SHA512

      30be31902975b53cbafe8dd669bae89097a513a9be2dead31b9320d26556cefc9da6a034660cb8d0281e6a167c90b76c1c37d9a1f859252eb60123f464a34b89

    • SSDEEP

      192:TL0AUNdaLixyaupSiP/VunlYJLLLTuCadvLvLvLvLvLvLvLvLvLvgQfP5cq7av:TL0AmdaLikV3hPLTuCadvLvLvLvLvLvy

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

3
T1012

System Information Discovery

4
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks